Lucene search
K

6 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/25 10:8 p.m.2 views

CVE-2026-27494

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the Python Code node to escape the sandbox. The sandbox did not sufficiently restrict access to certain built-in Python...

9.9CVSS5.8AI score0.0009EPSS
Exploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/02/13 12:0 a.m.3 views

n8n Node.js Package 2.x < 2.4.8 Python Sandbox Escape (CVE-2026-25115)

The version of the n8n Node.js Package installed on the remote host is 2.x prior to 2.4.8. It is, therefore, affected by a remote code execution vulnerability: - A vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code...

9.9CVSS6.8AI score0.00064EPSS
Exploits0References2
OSV
OSV
added 2026/02/04 7:42 p.m.3 views

GHSA-8398-GMMX-564H n8n has a Python sandbox escape

Impact A vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. Only authenticated users are able to execute code through Task Runners. This issue affected any deployment in which the...

9.9CVSS6.4AI score0.00064EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/04 4:48 p.m.1 views

CVE-2026-25115 n8n is vulnerable to Python sandbox escape

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to break out of the Python sandbox environment and execute code outside the intended security boundary. This issue has been patched in version 2.4.8...

9.4CVSS5.6AI score0.00064EPSS
Exploits0References1
OSV
OSV
added 2017/11/30 9:29 a.m.1 views

CVE-2017-12340

A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches could allow an authenticated, local attacker to access the Bash shell of an affected device's operating system, even if the Bash...

4.2CVSS5.9AI score
Exploits0References2
myhack58
myhack58
added 2017/04/07 12:0 a.m.96 views

Using the memory corruption vulnerability in the Python sandbox escape-vulnerability warning-the black bar safety net

Simply skip the text the author's README, we directly enter into the technical details. The Python environment using a custom whitelist/blacklist programs to prevent access to dangerous built-in functions, modules, functions, etc. Based on theoperating systemthe isolation provides some additional...

8AI score
Exploits0
Rows per page
Query Builder